Vulnerabilities

TI-2021-12514 CVE-2021-32849 · GHSA-756h-r2c9-qp5j

Arbitrary command execution in Gerapy

HIGH 73

Gerapy is a distributed crawler management framework.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0765 Published 2022-01-26 Fixed in 0.9.9 CWE-78

TI-2021-19663 CVE-2021-43857 · GHSA-9w7f-m4j4-j3xw

HIGH 75

Gerapy is a distributed crawler management framework.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.55608 Published 2021-12-27 Fixed in 0.9.8 CWE-78

TI-2020-06218 CVE-2020-7698 · GHSA-g57j-q48p-9vm2

MEDIUM 45

This affects the package Gerapy from 0 and before 0.9.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01717 Published 2020-07-29 Fixed in 0.9.3 CWE-78